...
This rule appears in the C++ Secure Coding Standard as MSC30-CPP. Do not use the rand() function for generating pseudorandom numbers.
Related Guidelines
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="ca4b8429-7612-4324-bd03-b461a898113f"><ac:plain-text-body><![CDATA[ | [[MITRE 2009 | AA. Bibliography#MITRE 09]] | [CWE ID 330 | http://cwe.mitre.org/data/definitions/330.html] "Use of Insufficiently Random Values" | ]]></ac:plain-text-body></ac:structured-macro> |
| CWE ID 327 "Use of a Broken or Risky Cryptographic Algorithm" | ||||
| CWE ID 330 "Use of Insufficiently Random Values" | ||||
| CWE ID 333 "Improper Handling of Insufficient Entropy in TRNG" | ||||
| CWE ID 332 "Insufficient Entropy in PRNG" | ||||
| CWE ID 337 "Predictable Seed in PRNG" | ||||
| CWE ID 336 "Same Seed in PRNG" |
Bibliography
<ac:structured-macro ac:name="unmigrated-wiki-markup |
...
" ac:schema-version="1" ac:macro-id="521c2032-3f90-4d0e-978c-cbb7a9016232"><ac:plain-text-body><![CDATA[ | [[API |
...
2006 |
...
https://www.securecoding.cert.org/confluence/display/java/AA.+Java+References#AA.JavaReferences-API06] |
...
] |
...
| [Class |
...
Random |
...
http://java.sun.com/javase/6/docs/api/java/util/Random.html |
...
] | ]]></ac:plain-text-body></ac:structured-macro> |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="3f030d9a-d966-4e1f-a484-bd9fdb6a57d8"><ac:plain-text-body><![CDATA[ | [[API |
...
2006 |
...
https://www.securecoding.cert.org/confluence/display/java/AA.+Java+References#AA.JavaReferences-API06] |
...
] |
...
[Class |
...
SecureRandom |
...
http://java.sun.com/javase/6/docs/api/java/security/SecureRandom.html |
...
] | ]]></ac:plain-text-body></ac:structured-macro> |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="93eba26f-f3b7-479f-8f38-60109bf502ee"><ac:plain-text-body><![CDATA[ | [[Find |
...
Bugs |
...
2008 |
...
https://www.securecoding.cert.org/confluence/display/java/AA.+Java+References#AA.JavaReferences-FindBugs08] |
...
] |
...
BC: |
...
Random |
...
objects |
...
created |
...
and |
...
used |
...
only |
...
once | ]]></ac:plain-text-body></ac:structured-macro> | |||
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="2a36cc8c-c5a9-4278-ad39-14f9b1ba301e"><ac:plain-text-body><![CDATA[ | [[Monsch 2006 | AA. Bibliography#Monsch 06]] |
| ]]></ac:plain-text-body></ac:structured-macro> |
...
49. Miscellaneous (MSC) MSC03-J. Never hardcode sensitive information